Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9745767F4211F0BAFCB7F6DAE4EC9C.roa
File: 3F9745767F4211F0BAFCB7F6DAE4EC9C.roa (raw, json)
Hash identifier: fuIZe/fCDPlYqfqsCpMqMptL0dykN9mWDaNFJMFQua0=
Subject key identifier: B0:A2:D2:8F:64:F6:21:7D:7B:4E:0B:A5:75:63:CE:21:32:26:7D:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9745767F4211F0BAFCB7F6DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:24:56 +0000
ROA not before: Fri 22 Aug 2025 10:24:51 +0000
ROA not after: Sat 08 Nov 2025 10:24:51 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93866 (0x16eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 10:24:51 2025 GMT
Not After : Nov 8 10:24:51 2025 GMT
Subject: CN=68a84578-8d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b9:6d:c8:cb:e4:e5:0d:68:bd:7f:f6:f6:59:
af:0f:fe:f7:dd:e1:a4:bd:9c:5c:7f:ce:87:3d:c3:
f1:e8:81:e1:77:53:ab:12:6a:1a:98:5a:f6:77:a5:
ba:bd:17:8f:9e:1f:6d:74:9f:6b:43:ff:9e:11:1d:
af:d2:61:2e:51:7e:98:c7:b2:8f:4e:3c:3b:39:3e:
06:f9:03:05:20:77:ac:e6:d5:0e:99:b8:e9:f4:dd:
48:fc:7b:7e:64:8c:2a:9d:17:48:e5:97:97:fd:53:
75:63:d8:a3:12:f1:c4:b6:2b:02:fe:47:25:e7:b1:
6e:15:c5:94:54:d9:83:22:fd:aa:d3:de:3b:9b:cb:
61:6a:fc:58:ba:ac:64:ce:9c:c7:c1:45:23:01:fd:
b6:f8:b7:f0:0d:dd:8b:39:0b:43:89:e0:1c:69:6a:
89:15:00:9f:8b:01:27:c2:7c:62:40:b8:86:47:e4:
a0:de:a7:d9:d9:3d:13:d5:21:f4:a4:89:ff:da:12:
cd:b2:5a:81:04:0d:30:8c:7e:d5:8b:36:f4:89:9d:
31:85:43:85:14:4e:04:49:5a:65:76:f3:05:2a:eb:
3f:37:35:ad:f0:4f:06:82:fe:87:4a:54:f6:13:e6:
d3:16:e7:77:7c:10:ab:3a:d0:69:2d:1e:3a:c0:50:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:D2:8F:64:F6:21:7D:7B:4E:0B:A5:75:63:CE:21:32:26:7D:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F9745767F4211F0BAFCB7F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:66:64:74:64:a1:50:89:a5:56:e1:8f:a4:a8:d9:fd:cf:0b:
b1:c7:dc:0a:9a:25:f8:23:71:4e:b5:a3:36:d1:75:09:18:d6:
cc:bc:d0:68:2e:27:bf:f9:93:8f:ca:69:4b:52:b9:6f:89:86:
ee:22:c4:f0:af:ee:67:93:4b:79:8b:ce:0b:12:58:76:8f:f6:
5b:2c:76:d3:3c:19:8d:c2:bf:aa:f2:a5:bd:c7:bf:0a:50:71:
b2:44:c4:23:e8:b5:32:ab:49:5d:1b:93:aa:01:48:90:45:ff:
4f:17:4b:12:95:82:d9:50:3b:63:ed:79:08:81:0b:6c:74:42:
6f:1e:aa:f6:e5:07:9b:c0:7f:c0:45:b8:53:31:55:14:56:20:
d9:48:16:bc:12:68:b8:02:94:98:2a:af:a9:28:4b:41:a6:22:
37:9f:27:a4:66:4b:c7:76:a9:12:57:f5:9c:f7:98:69:09:4a:
03:53:80:01:b5:9f:12:ef:ce:36:9a:98:cd:18:17:54:9c:8a:
1f:3a:8d:19:b6:b6:bc:5b:4b:4c:45:38:dc:1f:3d:d0:ca:a6:
12:57:71:96:5d:ad:59:66:a9:69:2b:e3:2b:96:46:54:b9:98:
c0:84:7e:c0:f1:cc:3e:4f:41:bb:0c:1a:23:18:05:23:33:b3:
f1:e4:8a:b6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAW6qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODIyMTAyNDUxWhcNMjUxMTA4MTAyNDUxWjAYMRYw
FAYDVQQDEw02OGE4NDU3OC04ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA67ltyMvk5Q1ovX/29lmvD/733eGkvZxcf86HPcPx6IHhd1OrEmoamFr2
d6W6vRePnh9tdJ9rQ/+eER2v0mEuUX6Yx7KPTjw7OT4G+QMFIHes5tUOmbjp9N1I
/Ht+ZIwqnRdI5ZeX/VN1Y9ijEvHEtisC/kcl57FuFcWUVNmDIv2q0947m8thavxY
uqxkzpzHwUUjAf22+LfwDd2LOQtDieAcaWqJFQCfiwEnwnxiQLiGR+Sg3qfZ2T0T
1SH0pIn/2hLNslqBBA0wjH7Vizb0iZ0xhUOFFE4ESVpldvMFKus/NzWt8E8Ggv6H
SlT2E+bTFud3fBCrOtBpLR46wFCw3wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLCi
0o9k9iF9e04LpXVjziEyJn0NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRjk3NDU3NjdGNDIxMUYwQkFGQ0I3RjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAD1mZHRkoVCJpVbhj6So2f3PC7HH3Aqa
JfgjcU61ozbRdQkY1sy80GguJ7/5k4/KaUtSuW+Jhu4ixPCv7meTS3mLzgsSWHaP
9lssdtM8GY3Cv6rypb3HvwpQcbJExCPotTKrSV0bk6oBSJBF/08XSxKVgtlQO2Pt
eQiBC2x0Qm8eqvblB5vAf8BFuFMxVRRWINlIFrwSaLgClJgqr6koS0GmIjefJ6Rm
S8d2qRJX9Zz3mGkJSgNTgAG1nxLvzjaamM0YF1Scih86jRm2trxbS0xFONwfPdDK
phJXcZZdrVlmqWkr4yuWRlS5mMCEfsDxzD5PQbsMGiMYBSMzs/HkirY=
-----END CERTIFICATE-----
Generated at Fri Aug 22 23:42:24 2025 by rpki-client